mathworks.com
Check C/C++ Code for Security Standards
Using results of a Polyspace® analysis, you can check your code for the following security standards:
• CWE™: See also CWE Coding Standard and Polyspace Results.
• CERT C99: See also CERT C Coding Standard and Polyspace Results.
• ISO/IEC TS 17961: See also ISO/IEC TS 17961 Coding Standard and Polyspace Results.
To adhere to a security standard, follow this workflow.
Step 1: Check Code Against Standard
Check your code for the subset of defects and coding rules that correspond to the standard.
• CWE: Use the CWE subset for the option Find defects (-checkers).
• CERT C99: Use both the option to check defects and the option to check coding rules.
- Find defects (-checkers): Use CERT-rules or CERT-all.
- Check MISRA C:2012 (-misra3): Use CERT-rules or CERT-all.
If you run a Code Prover analysis, the run-time errors are mapped to the CERT C standard. All Code Prover run-
time checkers are enabled by default.
• ISO/IEC TS 17961: Use both the option to check defects and the option to check coding rules.
- Find defects (-checkers): Use ISO-17961.
- Check MISRA C:2012 (-misra3): Use ISO-17961.
资源评论
